Directory traversal

xfsfsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems...

CVE-2007-2654

xfsfsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems...

CVE-2007-2654

xfsfsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems...

CVE-2007-2654

xfsfsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems...

CVE-2007-2654

CVE-2007-2654 concerns the xfsdump tool: the xfs_fsr component creates a .fsr temporary directory with insecure permissions, enabling local users to read or overwrite arbitrary files on xfs filesystems. This is confirmed by multiple connected sources (Mandriva/MDKSA-2007:134, SUSE SUSEVE- CVE map...

CVE-2007-2654

xfsfsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems...

Important: XFree86 security update

4.3.0-120.EL.0.1 - Add oracle detection to Imake. 4.3.0-120.EL - add cve-2007-1351.patch 234056 4.3.0-119.EL - Add int-overflow.patch 231684 - comment out requirement on fonts-base as that is an unreleased change. 4.3.0-118.EL - Add cve-2007-1003.patch 232996 4.3.0-117.EL - Make xfs depend on...

USN-263-1: Linux kernel vulnerabilities

A flaw was found in the module reference counting for loadable protocol modules of netfilter. By performing particular socket operations, a local attacker could exploit this to crash the kernel. This flaw only affects Ubuntu 5.10. CVE-2005-3359 David Howells noticed a race condition in the addkey...

Ubuntu 4.10 / 5.04 / 5.10 : linux-source-2.6.8.1/-2.6.10/-2.6.12 vulnerabilities (USN-263-1)

A flaw was found in the module reference counting for loadable protocol modules of netfilter. By performing particular socket operations, a local attacker could exploit this to crash the kernel. This flaw only affects Ubuntu 5.10. CVE-2005-3359 David Howells noticed a race condition in the addkey...

Code injection

Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale data...

CVE-2006-0554

Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale data...

CVE-2006-0554

Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale data...

HP-UX Security patch : PHSS_28468

The remote host is missing HP-UX Security Patch number PHSS28468 . SSRT2429 Potential Security Vulnerability in xfs %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17038;...

HP-UX PHSS_31178 : HP-UX Running xfs and stmkfont, Remote Unauthorized Access (HPSBUX01061 SSRT4773 rev.2)

s700800 11.00 X Font Server Patch : Potential security vulnerabilities have been reported with HP-UX running xfs and stmkfont. These vulnerabilities can be exploited to allow remote unauthorized access to resources owned by group 'bin.'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

HP-UX PHSS_31180 : HP-UX Running xfs and stmkfont, Remote Unauthorized Access (HPSBUX01061 SSRT4773 rev.2)

s700800 11.22 X Font Server Patch : Potential security vulnerabilities have been reported with HP-UX running xfs and stmkfont. These vulnerabilities can be exploited to allow remote unauthorized access to resources owned by group 'bin.'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

HP-UX PHSS_31181 : HP-UX Running xfs and stmkfont, Remote Unauthorized Access (HPSBUX01061 SSRT4773 rev.2)

s700800 11.23 X Font Server Patch : Potential security vulnerabilities have been reported with HP-UX running xfs and stmkfont. These vulnerabilities can be exploited to allow remote unauthorized access to resources owned by group 'bin.'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-283-1 : xfsdump - insecure file creation

Ethan Benson discovered a problem in xfsdump, that contains administrative utilities for the XFS filesystem. When filesystem quotas are enabled xfsdump runs xfsdq to save the quota information into a file at the root of the filesystem being dumped. The manner in which this file is created is...

CVE-2002-1317

Buffer overflow in Dispatch routine for XFS font server fs.auto on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service crash or execute arbitrary code via a certain XFS query...

CVE-2002-1317

The CVE-2002-1317 flaw affects the Solaris X Window Font Server (XFS) daemon fs.auto, where the Dispatch() function handles XFS queries. This remotely exploitable buffer overflow can allow an attacker to crash the service or execute arbitrary code with the fs.auto/Font Server privileges (typicall...

Mandrake Linux Security Advisory : xfsdump (MDKSA-2003:047)

A vulnerability was discovered in xfsdump by Ethan Benson related to filesystem quotas on the XFS filesystem. When xfsdump runs xfsdq to save the quota information into a file at the root of the filesystem being dumped, the file is created in an unsafe manner. A new option to xfsdq was added when...